CentOS Errata and Security Advisory 2006:0749
https://rhn.redhat.com/errata/RHSA-2006-0749.html
The following updated files have been uploaded and are currently syncing to the mirrors:
i386: tar-1.14-12.RHEL4.i386.rpm
src: tar-1.14-12.RHEL4.src.rpm